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CLAIMS 

1. A method for use by an intermediate network device having a plurality of inter- 
faces for forwarding network packets among the interfaces, one or more of the interfaces 
being associated with one or more Virtual Local Area Network (VLAN) designations, the 
method comprising the steps of: 

mapping each VLAN designation to a site identifier; 

receiving on an inbound interface a packet having a site-local unicast destination 
address; 

identifying the VLAN designation associated with the received packet; 

utilizing the identified VLAN designation to retrieve the site identifier to which 
the VLAN designation is mapped; 

creating a modified destination address by embedding the retrieved site identifier 
into the site-local unicast destination address; and 

rendering a forwarding decision for the received packet based on the modified 
destination address. 

2. The method of claim 1 wherein the received packet complies in at least sub- 
stantial part with version 6 of the Internet Protocol (IPv6). 

3. The method of claim 1 wherein the step of rendering a forwarding decision 
comprises the step of deciding upon an outbound interface from which the packet is to be 
forwarded. 

4. The method of claim 3 wherein the packet further includes a site-local unicast 
source address, the method further comprising the steps of: 

identifying the VLAN designation associated with the outbound interface from 
which the packet is to be forwarded or the VLAN designation with which the packet is to 
be tagged; 

utilizing the identified VLAN designation for the outbound interface to retrieve 
the site identifier to which the VLAN designation is mapped; and 

20 

D:\DOCUME~l\cds\LOCALS-l\Temp\0461.doc 9/25/2001 11:30 AM 



PATENT 
112025-0461 

8 comparing the site identifier associated with the inbound interface with the site 

9 identifier associated with the outbound interface. 

1 5. The method of claim 4 further comprising the steps of: 

2 if, as a result of the comparing step, the two site identifiers match, forwarding the 

3 packet on the outbound interface; and 

4 if, as a result of the comparing step, the two site identifiers do not match, drop- 

5 ping the packet without forwarding. 

1 6. The method of claim 1 wherein the step of rendering comprises the step of ap- 

2 plying the modified destination address to a forwarding information base (FEB) optimized 

3 to permit fast lookups. 

1 7. The method of claim 6 wherein the FIB includes one or more content address- 

2 able memories (CAMs) and/or ternary content addressable memories (TCAMs). 

1 8. The method of claim 7 wherein the one or more CAMs and/or TCAMs stores 

2 addresses or address prefixes that have been modified to include site identifiers embed- 

3 ded therein. 

1 9. The method of claim 8 wherein at least one of the CAMs and/or TCAMs has a 

2 plurality of rows and each row of the CAM and/or TCAM stores a respective address or 

3 address prefix. 

1 10. The method of claim 1 wherein 

2 the received packet complies in at least substantial part with version 6 of the 

3 Internet Protocol (IPv6), 

4 the site-local unicast address has one or more areas set to null, and 

5 the site identifier is embedded at a selected null area of the address. 
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1 11. The method of claim 1 whereby each VLAN designation is mapped to a single 

2 site identifier. 

1 12. The method of claim 1 1 whereby a plurality of VLAN designations are 

2 mapped to the same site identifier. 

1 13. The method of claim 1 wherein 

2 packets may be one of either untagged or tagged with a VLAN designation, and 

3 the step of identifying includes either, if the received packet is untagged, deter- 

4 mining the VLAN designation of the inbound interface on which the untagged packet 

5 was received or, if the received packet is tagged, determining the VLAN designation with 

6 which the received packet is tagged. 

1 14. A method for use by an intermediate network device having a plurality of in- 

2 terfaces for forwarding network packets among the interfaces, one or more of the inter- 

3 faces being associated with one or more Virtual Local Area Network (VLAN) designa- 

4 tions, the method comprising the steps of: 

5 mapping each VLAN designation to a site identifier; 

6 receiving on an inbound interface a packet having a site-local unicast destination 

7 address; 

8 identifying the VLAN designation associated with the received packet; and 

9 utilizing the identified VLAN designation to retrieve the site identifier to which 

10 the VLAN designation is mapped. 

1 15. The method of claim 14 wherein the packet further includes a site-local uni- 

2 cast source address, the method further comprising the steps of: 

3 identifying the VLAN designation associated with the outbound interface from 

4 which the packet is to be forwarded or the VLAN designation with which the packet is to 

5 be tagged; 

6 utilizing the identified VLAN designation for the outbound interface to retrieve 

7 the site identifier to which the VLAN designation is mapped; and 
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8 comparing the site identifier associated with the inbound interface with the site 

9 identifier associated with the outbound interface. 

1 16. The method of claim 15 further comprising the steps of: 

2 if, as a result of the comparing step, the two site identifiers match, forwarding the 

3 packet on the outbound interface; and 

4 if, as a result of the comparing step, the two site identifiers do not match, drop- 

5 ping the packet without forwarding. 

1 17. An intermediate network device for forwarding packets within a computer 

2 network, the device comprising: 

3 a plurality of interfaces for receiving and forwarding packets, one or more of the 

4 interfaces associated with one or more virtual local area network (VLAN) designations; 

5 a forwarding information base (FIB) for storing routing information; 

6 a routing engine in communicating relationship with the FEB, the routing engine 

7 configured to make forwarding decisions for received packets, based at least in part on 

8 the routing information in the FEB; and 

9 a memory in communicating relationship with the routing engine, the memory 

10 configured to store the VLAN designations associated with the device's interfaces in 
n mapping relationship with one or more site identifiers, 

12 wherein the routing engine utilizes the memory to ensure that a packet having a 

13 site-local unicast source and/or destination address is only forwarded between interfaces 

14 corresponding to the same site identifier. 

1 18. The intermediate network device of claim 17 wherein the FEB includes one or 

2 more content addressable memories (C AMs) and/or ternary content addressable memo- 

3 ries (TCAMs) programmed with a plurality of addresses or address prefixes. 

1 19. The intermediate network device of claim 18 wherein at least one CAM 

2 and/or TCAM has a width that is equal to or greater than 128 bits. 
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1 20. The intermediate network device of claim 17 wherein at least some of the 

2 packets forwarded by the device comply in at least substantial part with version 6 of the 

3 Internet Protocol (IPv6). 

1 21. The intermediate network device of claim 20 wherein the routing engine: 

2 identifies the VLAN designation associated with the received packet, 

3 utilizes the identified VLAN designation to retrieve the site identifier to which the 

4 VLAN designation is mapped, 

5 creates a modified destination address by embedding the retrieved site identifier 

6 into the site-local unicast destination address, and 

7 renders a forwarding decision for the received packet based on the modified des- 

8 tination address. 

1 22. The intermediate network device of claim 21 wherein the routing engine pre- 

2 vents packets received on an inbound interface that corresponds to a first site identifier 

3 from being forwarded on an outbound interface that corresponds to a second site identi- 

4 fier. 

1 23. The intermediate network device of claim 17 wherein 

2 the plurality of interfaces are located at one or more line cards disposed at the in- 

3 termediate network device, and 

4 each line card includes a corresponding FIB and routing engine for rending for- 

5 warding decisions. 

1 24. A method for use by an intermediate network device having a plurality of in- 

2 terfaces for forwarding network packets among the interfaces, one or more of the inter- 

3 faces being associated with one or more Virtual Local Area Network (VLAN) designa- 

4 tions, the method comprising the steps of: 

5 receiving on an inbound interface a packet having a link-local unicast destination 

6 address; 

7 identifying the VLAN designation associated with the received packet; 
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creating a modified destination address by embedding the identified VLAN des- 
ignation into the link-local unicast destination address; and 

rendering a forwarding decision for the received packet based on the modified 
destination address. 

25. The method of claim 24 wherein the received packet complies in at least sub- 
stantial part with version 6 of the Internet Protocol (IPv6). 

26. The method of claim 25 wherein the step of rendering a forwarding decision 
comprises the step of deciding upon an outbound interface from which the packet is to be 
forwarded. 

27. The method of claim 26 wherein the packet further includes a link-local uni- 
cast source address, the method further comprising the steps of: 

identifying the VLAN designation associated with the outbound interface from 
which the packet is to be forwarded; and 

comparing the VLAN designation associated with the inbound interface with the 
VLAN designation associated with the outbound interface. 

28. The method of claim 27 further comprising the steps of: 

if, as a result of the comparing step, the two VLAN designations match, forward- 
ing the packet; and 

if, as a result of the comparing step, the two VLAN designations do not match, 
dropping the packet without forwarding. 

29. The method of claim 24 wherein 

packets may be one of either untagged or tagged with a VLAN designation, and 
the step of identifying includes either, if the received packet is untagged, deter- 
mining the VLAN designation of the inbound interface on which the untagged packet 
was received or, if the received packet is tagged, determining the VLAN designation with 
which the received packet is tagged. 
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